PT-2026-36888

Name of the Vulnerable Software and Affected Versions Detect-It-Easy versions prior to 3.21 Description Insufficient path normalization during archive extraction allows attackers to write arbitrary files to the filesystem. By crafting malicious archive entries using absolute paths or relative...

CVE-2026-41351 OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding

OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. Attackers can re-encode Telnyx webhook signatures to bypass replay detection while maintaining valid signature...

Auditable Agents

LLM agents call tools, query databases, delegate tasks, and trigger external side effects. Once an agent system can act in the world, the question is no longer only whether harmful actions can be prevented--it is whether those actions remain answerable after deployment. We distinguish...

SUSE-SU-2026:20822-1 Security update for systemd

This update for systemd fixes the following issues: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method bsc1259650. - CVE-2026-29111: local unprivileged user can trigger an assert in systemd bsc1259418. - udev: check for invalid...

FileRise 安全漏洞

FileRise is a lightweight, self-hosted web-based file manager developed by Ryan. Versions of FileRise from 1.0.1 to 3.10.0 contained security vulnerabilities. These vulnerabilities stemmed from the resumableIdentifier parameter in the Resumable.js multipart upload handler, which was concatenated...

The Most Common Swap Scams in 2026, and How to Avoid Them

Swap scams target traders through fake DEX sites, token approvals, and phishing. Learn how to detect swap scams and protect funds before you swap now...

Unspecified Vulnerability in Multiple Apple Products (CNVD-2026-14483)

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products that can be exploited by an attacker to cause an app to recognize other apps install...

Malicious code in detect-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7bb76ced9a07af5292a6e90596305f844da2d89fc98329431d360797c4b1d4 The package detect-cache was found to contain malicious code. Source: ghsa-malware 136a28b5b046aa8efe7f9f0084f8f700650cdca446449494ec58b8414886f0a0 A...

Malicious Package

Overview detect-cache is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-957 Malicious code in detect-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7bb76ced9a07af5292a6e90596305f844da2d89fc98329431d360797c4b1d4 The package detect-cache was found to contain malicious code. Source: ghsa-malware 136a28b5b046aa8efe7f9f0084f8f700650cdca446449494ec58b8414886f0a0 A...

CVE-2026-20641

A privacy issue was addressed with improved checks. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3. An app may be able to identify what other apps a user has install...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products that can be exploited by an attacker to cause an app to recognize other apps install...

CVE-2026-2246

CVE-2026-2246 affects the apriltag library (AprilRobotics) up to version 3.4.5. The vulnerability targets function apriltag_detector_detect in apriltag.c and results in memory corruption when exploited locally. Publicly disclosed exploit details are available, and a patch is identified by the pat...

PT-2026-7139

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltag detector detect of the file apriltag.c. The manipulation leads to memory corruption. The attack must be carried out locally. The exploit has been disclosed...

What Is Continuous Threat Monitoring? A Full Guide

Relying on periodic security scans is like checking your rearview mirror once every ten miles on a busy highway. You get a snapshot of what’s behind you, but you miss the real-time dangers closing in. This reactive approach leaves dangerous gaps for attackers to exploit, keeping your security tea...

CVE-2022-38673

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...

SUSE CVE-2022-50847

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

EUVD-2022-55851

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

UBUNTU-CVE-2023-54263

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/kms/nv50-: init hpdirqlock for PIOR DP Fixes OOPS on boards with ANX9805 DP encoders...

CVE-2022-50847

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...